DNS servers must only ever answer queries for local IP ranges/subnets, and never for third parties.
The dangers in not doing so are many and serious, including DDoS attacks.